/*
 * Copyright (C) 2008 GeoScheduler Team, as stated on <http://www.geoscheduler.org/authors>.
 * 
 * This file is part of GeoScheduler.
 * 
 * GeoScheduler is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 * 
 * GeoScheduler is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 * 
 * You should have received a copy of the GNU Lesser General Public License
 * along with GeoScheduler. If not, see <http://www.gnu.org/licenses/>.
 */
package org.geoscheduler.security.authorize;

import java.util.Collection;

import org.geoscheduler.exceptions.GSAuthorizationException;
import org.geoscheduler.model.Token;
import org.json.JSONException;

/**
 * Provider of authorization capabilities.
 * 
 * It knows about all {@link Authorizer}s and can use the right one on given authorize() request.
 *
 * @author srakyi
 */
public class AuthorizationProvider {
	private Collection<Authorizer> authorizers;

	public AuthorizationProvider(Collection<Authorizer> authorizers) {
		super();
		this.authorizers = authorizers;
	}
	
	/**
	 * Tries to authorize given data with first applicable {@link Authorizer}.
	 * 
	 * @param auth	Authorization header content.
	 * @param data	Data to authorize over.
	 * @throws JSONException
	 */
	public Token authorize(String auth, Object data) throws JSONException, GSAuthorizationException {
		for (Authorizer a : this.authorizers) {
			if (a.isApplicableTo(auth)) {
				return a.authorize(auth, data);// successfully authorized (no exception raised)
			}
		}
		
		throw new GSAuthorizationException("Applicable Authorizer not found.");
	}
	
}
